Now a days, the applications are moving to agentic. On the other hand, as the codes fetched or generated by agents can not be treated as trusted product and we should keep our confidential data and infra control plane untouchable by the agent directly.

Based on existing (proved) Kubernetes infrastructure, we (kata container developers, ant open source team, and Japan AI team) build the sandbox services with agent-sandbox, Kata Containers, dragonfly, and pvm kernel virtualization driver, which make the service not only secure, but also secure enough.

Live demo will be shown in this session.